highvalorinvestment[.]com

highvalorinvestment.com was registered on June 10 2026 through NameSilo, LLC and is currently using the ns1.netlightsystems.com and ns2.netlightsystems.com name servers. The domain resolves to the IPv4 address 86.107.77.238, an address that has not been previously associated with known malicious infrastructure in public threat feeds. VirusTotal reports a single positive from 91 scanned engines, indicating that at least one scanner identified suspicious characteristics.

The domain is listed on a single security blocklist and has been actively blocked by the PhishDestroy mitigation service, yet it remains reachable on the public internet. No additional evidence such as SSL certificate details, HTTP response codes, page titles, or brand‑specific lure content has been published in the available intelligence, so the exact phishing vector and targeted brand cannot be confirmed at this time. The recent creation date, active status, and the fact that the domain is already being leveraged by at least one detection engine suggest a high likelihood of exploitation, consistent with the generic phishing classification.

Defenders should add highvalorinvestment.com and its resolving IP 86.107.77.238 to outbound and inbound deny lists, monitor DNS query logs for lookups, and enforce web‑filter policies that block access to the domain. Continuous re‑scanning on multi‑engine platforms is advised to capture any evolving payloads, and threat‑intel teams should watch for related domains using the same name‑server pair or hosting provider. Until further forensic analysis of the hosted content is available, the domain should be treated as a high‑risk indicator.